Honeypots mailing list archives

Is it one way to detect honeypot?


From: wanfat wu <fred_honeypot () yahoo com hk>
Date: Wed, 11 Feb 2004 23:54:26 +0800 (CST)

Hi All,
 
  I am running honeyd with arpd. It can answer with unused IP. However, when I use some programs to check the MAC 
address of virtual hosts(unused IP),  it always answer with the MAC address of honeyd host.
  
  By looking at the MAC address, all the MAC are the same! Is it one way to detect honeypot? Anything to hide my 
honeypot?
 
 Thanks!
 
Best,
Fred

必殺技、飲歌、小星星...
浪漫鈴聲  情心連繫
http://ringtone.yahoo.com.hk/

Current thread: